Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B10B8/DA26C5EE0F1711EB96C8FA5CF8AEA228/A0BF104E0F1811EBA45ABB5DF8AEA228.roa
File: A0BF104E0F1811EBA45ABB5DF8AEA228.roa (raw, json)
Hash identifier: mUHq8K9DMRZJ+zk4ZqSyPx1oCMuJZdfM/9xNWE9wQ1U=
Subject key identifier: 2C:ED:C0:CD:3F:FA:DF:EC:D9:27:D4:AC:A9:6E:75:EA:3D:EE:5D:E8
Certificate issuer: /CN=F36B10B8AF/serialNumber=F5ED7159479B4766AA7DDE2D12DDC976F6D186DD
Certificate serial: 02
Authority key identifier: F5:ED:71:59:47:9B:47:66:AA:7D:DE:2D:12:DD:C9:76:F6:D1:86:DD
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/9e1xWUebR2aqfd4tEt3JdvbRht0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36B10B8/DA26C5EE0F1711EB96C8FA5CF8AEA228/A0BF104E0F1811EBA45ABB5DF8AEA228.roa
Signing time: Thu 15 Oct 2020 19:00:03 +0000
ROA not before: Thu 15 Oct 2020 18:59:56 +0000
ROA not after: Wed 15 Oct 2025 18:59:56 +0000
asID: 15169
IP address blocks: 2c0f:fb50::/32 maxlen: 32
2c0f:fb50:4002::/48 maxlen: 48
2c0f:fb50:4003::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36B10B8/DA26C5EE0F1711EB96C8FA5CF8AEA228/9e1xWUebR2aqfd4tEt3JdvbRht0.crl
rsync://rpki.afrinic.net/repository/member_repository/F36B10B8/DA26C5EE0F1711EB96C8FA5CF8AEA228/9e1xWUebR2aqfd4tEt3JdvbRht0.mft
rsync://rpki.afrinic.net/repository/afrinic/9e1xWUebR2aqfd4tEt3JdvbRht0.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36B10B8AF/serialNumber=F5ED7159479B4766AA7DDE2D12DDC976F6D186DD
Validity
Not Before: Oct 15 18:59:56 2020 GMT
Not After : Oct 15 18:59:56 2025 GMT
Subject: CN=5f889c32-ce4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d9:76:e2:27:b7:2f:4e:7b:cb:09:a0:9c:83:
2b:ff:43:d1:1c:5d:df:26:ef:49:8e:00:99:72:82:
b8:4a:28:01:10:6d:1d:d0:5e:35:8a:90:34:60:20:
9c:ad:cc:17:9a:30:57:fb:71:ee:4b:24:d7:ab:51:
42:ba:96:25:88:06:7b:b4:69:e9:68:6b:95:31:e8:
e5:97:b1:49:8a:0f:25:6e:38:f9:dd:f6:a1:c9:b1:
c0:5b:67:17:e6:29:e2:d4:08:89:93:45:3c:49:f0:
a7:60:3a:43:d8:81:6b:44:96:ff:50:38:08:5e:4f:
a3:c6:08:c9:b8:25:24:93:bc:06:91:7f:52:5f:4c:
70:9f:fa:cd:97:45:77:cb:6e:62:e6:9c:ed:e5:da:
a5:a5:4e:b0:6d:06:ec:3b:63:a2:ad:d8:0b:9f:fd:
2a:5c:36:78:4b:a3:a3:1d:8f:56:22:e6:d8:38:7f:
7e:8d:9e:5c:88:a9:8c:b5:01:08:a9:c9:8b:de:ad:
04:16:29:c8:9c:75:99:84:5c:f5:7a:71:72:83:ca:
1f:e5:ef:36:8b:d8:90:c9:18:df:d4:b1:49:88:a3:
3c:36:28:cc:d0:1e:3d:33:4a:6b:f8:24:6b:29:53:
7d:49:bc:64:d7:6b:c0:3f:a3:db:48:db:6d:f4:88:
ac:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:ED:C0:CD:3F:FA:DF:EC:D9:27:D4:AC:A9:6E:75:EA:3D:EE:5D:E8
X509v3 Authority Key Identifier:
keyid:F5:ED:71:59:47:9B:47:66:AA:7D:DE:2D:12:DD:C9:76:F6:D1:86:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36B10B8/DA26C5EE0F1711EB96C8FA5CF8AEA228/9e1xWUebR2aqfd4tEt3JdvbRht0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/9e1xWUebR2aqfd4tEt3JdvbRht0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B10B8/DA26C5EE0F1711EB96C8FA5CF8AEA228/A0BF104E0F1811EBA45ABB5DF8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:fb50::/32
Signature Algorithm: sha256WithRSAEncryption
52:48:37:24:11:a0:0e:2f:30:6d:24:61:9c:89:45:a4:2a:37:
a8:f9:b0:86:b1:95:94:5c:96:2b:3d:dc:b7:b5:98:50:08:f1:
2c:3b:d2:82:d5:12:0e:7f:0b:2a:d2:a4:75:29:ec:8a:bb:6b:
ff:4f:02:12:8b:00:a8:7e:56:1b:51:43:d8:46:30:57:bf:52:
00:1f:cd:99:cb:1c:cd:43:f6:a4:f5:69:b4:7c:a8:72:18:fc:
97:3a:31:d5:34:ea:a2:f7:64:69:83:5a:9e:60:0a:e7:b4:b9:
be:96:74:ce:65:42:19:4b:e5:14:93:9e:bc:20:6e:97:4a:3e:
d3:77:09:03:cd:4e:89:ec:64:0a:b2:81:0b:85:82:8d:35:39:
cd:7a:5f:fc:98:b6:91:65:1c:6d:e8:28:bd:ca:9e:9b:9d:e4:
4e:27:3d:c7:5a:34:32:41:6d:8e:cc:3d:b4:01:9b:4c:ff:90:
b9:0e:92:b9:75:ca:a9:10:90:08:de:aa:fc:9f:f6:fc:42:f5:
d5:e1:2d:0a:c8:0a:e2:7a:ba:de:9f:2b:3a:f1:ca:b1:fd:09:
e8:1f:6b:98:0d:d5:1b:c3:0c:d3:ae:35:1d:32:fd:fa:4e:d2:
e4:94:41:79:e7:a5:34:40:8e:9c:31:e0:53:7b:44:9d:3b:4e:
36:5e:01:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:10:14 2024 by rpki-client on console-fra.rpki-client.org